I also prefer the dated jars approach.
On 7/7/06, Phil Steitz <[EMAIL PROTECTED]> wrote:
On 7/6/06, Phil Steitz <[EMAIL PROTECTED]> wrote:
> On 7/6/06, Brett Porter <[EMAIL PROTECTED]> wrote:
> > On 7/07/2006 2:27 AM, Phil Steitz wrote:
> > > 2) Need to decide whether we want dated snaps or just overwriting. If
> > > the latter, we would need a way to purge old stuff (like the crontab
> > > that runs on Minotaur that purges out the old nightly distros).
> >
> > I generally prefer dated (just in case something is broken with today's,
> > you can try yesterdays). However, it does give you the obligation to
> > clean up afterwards (not necessarily a bad thing).
> >
> > Neither work in Maven 2 if you are downloading from a Maven 1 repo at
> > the moment (dated because there was never any facility for that,
> > SNAPSHOT because of the bug Jorg mentioned).
> >
> > >
> > > 3) Ensure that the deploy target hosts are set correctly in all of the
> > > POMs - maybe modify the script to check to avoid accidental
> > > deployments to java-repository.
> >
> > +1, and also check that currentVersion endsWith -SNAPSHOT.
> >
> > >
> > > 4) Someone needs to remind me (or just patch the script) of the
> > > correct maven 1 target to execute. (jar:snapshot-deploy or somesuch).
> >
> > With the current plugins installed, jar:deploy will do a dated snapshot
> > by default I think, based on the end of the version.
> >
> > >
> > > 5) I either need to get over reservations about signing myself, or be
> > > OK with no sigs. Is it OK to deploy unsigned stuff to the snapshot
> > > repo? The same actually applies to the zips, tars being generated by
> > > the script now.
> >
> > As Craig said, no need to sign them.
> >
> > It's a false sense of security when they aren't any more secure (anyone
> > that can compromise the machine can compromise the key being used to
> > sign them if it is automated).
>
> So hashing (which maven does) is as much as we can really practically
> do automated.
>
> Looks also like we have consensus on the "snapshot" semantics - i.e.,
> just overwrite with a new snap each night. If there are no objections
> in the next couple of days, I will go ahead and make the change to
> support this, or someone else can.
Sorry, I missed Brett's stated preference for dated jars, which I
actually share. Is this possible using maven 1 somehow? I vaguely
remember doing this long ago and m1 being smart enough to grab the
latest jar when dated snaps were deployed. We could set up a cron to
clean up the repo, like we do the nightlies.
Phil
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
--
http://www.multitask.com.au/people/dion/
"If you even dream of beating me you'd better wake up and apologize" -
Muhammad Ali
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
